On 22 September 2023, the Quebec data protection regime (projet de loi 64) is implemented. The Act introduces a new notification regime in case of data breaches. By this day, companies will have to have implemented the following obligations. Companies must set up data governance processes, enable the transfer of personal information, instruct employees about the new privacy regime and establish internal policies for the management of data. The act also specifies the cases in which a privacy assessment is required and the sanctions in case of non-compliance.
Original source